Privacy policy

Last updated: July 22, 2026

This online store and website are operated by NUIATA BREWIN, covering all associated content, functions, tools, merchandise and services to deliver a curated shopping experience for customers (collectively referred to as the "Services"). Our platform is powered by Shopify to support the operation of all Services. This Privacy Policy sets out how we collect, utilise and disclose your personal data when you browse our site, place orders, complete transactions or communicate with our team. If any inconsistency exists between our Terms of Service and this Privacy Policy, this document shall prevail in matters concerning the collection, processing and disclosure of your personal information.

Please read this Privacy Policy thoroughly. By accessing and using any part of our Services, you confirm you have read and acknowledge how your personal data will be collected, used and shared in accordance with this policy.

Personal Information We Collect and Process

The term "personal information" refers to data that can identify you or be reasonably linked to an individual. Information that has been anonymised or de-identified (so it can no longer be traced back to you) is not classified as personal information. Based on how you interact with our Services, your place of residence and applicable legal requirements, we may gather and process the following categories of personal information, as well as derived insights generated from this data:

  • Contact information: your full name, residential address, billing address, delivery address, phone number and email address.
  • Financial details: credit/debit card numbers, bank account information, payment card data, transaction records, payment methods, payment confirmations and other payment-related information.
  • Account data: usernames, passwords, security verification questions, personal preferences and account settings.
  • Transaction records: products you view, add to cart, save to wishlists, purchase, return, exchange or cancel, together with your historical order records.
  • Customer communications: all content you send when contacting us, such as messages submitted for customer support enquiries.
  • Device data: information about your hardware device, browser and network connection, your IP address and other unique device identifiers.
  • Usage statistics: records showing how and when you browse and interact with our Services.

Sources of Personal Information

We obtain personal information through the following channels:

  • Information provided directly by you: collected when you register an account, browse our Services, contact our support team or actively submit your personal data;
  • Automatically collected via our Services: gathered from your device while you visit our website or use our products, including data captured through cookies and comparable tracking technologies;
  • Information from service suppliers: collected by our authorised third-party providers who process data on our behalf to deliver specific technical services;
  • Data received from business partners and other external third parties.

How We Use Your Personal Information

We process your personal information for the purposes listed below, depending on the way you interact with our business and which Services you use:

  • Deliver, customise and improve our Services. We use your personal data to fulfil our contractual obligations, process payments, dispatch your orders, remember your favourite products and preferences, send account-related notifications, handle purchases, returns and exchanges, create and maintain your user account, arrange deliveries and support return procedures. We also enable product reviews and build personalised shopping experiences, such as recommending relevant merchandise. This data helps us optimise and upgrade all Services we provide.
  • Marketing and promotional activities. We may use your information to send marketing and promotional materials via email, SMS or postal mail. We may also display targeted advertisements for our goods and services on our platform and external websites, based on your previous purchases, cart contents and browsing activity on our site.
  • Security maintenance and fraud prevention. Your personal data helps us verify account identities, maintain secure payment and shopping environments, detect and investigate potentially fraudulent, unlawful, dangerous or malicious behaviour, protect public safety and safeguard our platform. If you register an account to use our Services, you are responsible for keeping your login credentials secure. We strongly advise against sharing your username, password or other access details with any third party.
  • Customer communication. We rely on your contact information to provide customer assistance, respond to your enquiries, deliver efficient service and sustain our ongoing business relationship.
  • Legal compliance. We may process personal information to abide by applicable laws, respond to formal legal requests (including demands from police and government authorities), conduct investigations for civil discovery, pending or active litigation and enforce our published terms and policies.

Sharing and Disclosure of Personal Information

Subject to this Privacy Policy, we may share your personal information with third parties for legitimate business purposes under these circumstances:

  • With Shopify, vendors and other external service providers who complete tasks on our behalf, including IT administration, payment processing, data analytics, customer service, cloud storage, order fulfilment and delivery services.
  • With commercial and marketing partners to run advertising campaigns. For instance, we utilise Shopify tools to deliver personalised advertisements from third-party platforms based on your activity across different online stores and websites. Our partners will handle your information under their own separate privacy statements. Depending on your place of residence, you hold the right to request us to stop sharing your data for targeted advertising based on cross-site browsing activity.
  • When you instruct, request or consent to us sharing your information with third parties, such as for product delivery or when you use social media widgets and third-party login functions.
  • With affiliated companies within our corporate group.
  • During corporate transactions including mergers, acquisitions or insolvency proceedings; to satisfy legal obligations (such as responding to subpoenas and court orders); to enforce our Terms of Service; and to protect our platform, our legal rights and the rights of our users and other individuals.

Our Relationship with Shopify

All Services are hosted on Shopify’s infrastructure. Shopify collects and processes personal information related to your site visits to operate and continuously improve our platform. Any data you submit through our store will be transferred to Shopify and other third-party service providers, which may operate in countries outside your residential location. We use advanced Shopify business tools to support store growth and optimisation; these features utilise data generated from your interactions with our store, alongside activity data from other merchants and Shopify’s ecosystem. In these scenarios, Shopify acts as the independent data controller and will respond to requests you submit to exercise your data rights for such processing activities.

You can review the Shopify Consumer Privacy Policy to learn how Shopify processes personal information and understand your available rights. Residents in eligible regions may exercise their data rights via the official Shopify Privacy Portal: https://privacy.shopify.com/en.

Third-Party Websites and External Links

Our Services may contain hyperlinks leading to external websites operated by independent third parties. If you visit these unaffiliated websites, please carefully check their own privacy policies and terms of service. We cannot guarantee and take no responsibility for the data security and privacy standards of these external platforms, nor the accuracy and integrity of content hosted there.

Information you publish on public or semi-public channels, including third-party social platforms, may be visible to other users without usage restrictions applied by us or external operators. The inclusion of external links on our website does not constitute official endorsement of these platforms, their operators or their content, unless explicitly stated on our site.

Children’s Personal Data

Our Services are not designed for minors. We do not intentionally collect personal information from children below the age of majority set by local legislation. If you are a parent or legal guardian and discover your child has submitted personal data to us, you may use the contact information listed below to request full deletion of that information. As of the effective date of this Privacy Policy, we have no knowledge that we "sell" or "share" (as defined under applicable local law) personal information belonging to anyone under 16 years old.

Data Security & Information Retention

Please be aware that no online security system is completely invulnerable, and absolute data security cannot be guaranteed. Data sent to us over the internet may face risks during transmission. We recommend avoiding sending sensitive or confidential information via unsecured communication channels.

The length of time we keep your personal data depends on multiple factors: whether the data is required to maintain your account, deliver ongoing Services, fulfil statutory legal duties, resolve disputes or enforce agreed contracts and policies.

Your Rights and Options

Depending on your country or region of residence, you may hold some or all of the data rights listed below. These rights are not unconditional, only apply under specific circumstances, and we are legally permitted to decline certain requests where allowed by law.

  • Right of Access. You may request a copy of all personal information we hold about you.
  • Right to Erasure. You can submit a request asking us to delete your stored personal information.
  • Right to Rectification. You have the right to demand correction of inaccurate personal data we maintain.
  • Right to Data Portability. Where applicable, you may obtain a copy of your personal data and request us to transfer the records to another third party, subject to legal exceptions.
  • Manage communication preferences. We may send promotional emails to you. You are able to unsubscribe from marketing communications at any time using the unsubscribe link included in our emails. After unsubscribing, you will still receive essential non-promotional notifications related to your account and orders.

You may exercise these rights either via tools available on our Services or by contacting us through the contact details listed below. Further information about Shopify’s data processing and your associated rights can be found at https://privacy.shopify.com/en.

We will not discriminate against you for exercising your legal data rights. Before processing your formal requests, we may need to complete identity verification in line with applicable laws. You are allowed to appoint an authorised agent to submit requests on your behalf. In such cases, we require formal proof confirming you have authorised the agent to act for you, and we may still ask you to verify your identity directly. We will respond to valid requests within the time limits required by law.

Formal Complaints

If you have concerns or complaints regarding how we process your personal data, please contact us via the information shown below. Based on your location, you may appeal our decision by reaching out to us, or submit a formal complaint to your local data protection authority.

International Data Transfers

We reserve the right to transfer, store and process your personal information in countries outside your place of residence.

When transferring personal data out of the European Economic Area or the United Kingdom, we rely on recognised data transfer mechanisms such as Standard Contractual Clauses issued by the European Commission or equivalent frameworks approved by UK competent authorities. This rule does not apply if data is sent to a territory officially recognised to provide adequate data protection standards.

Updates to this Privacy Policy

We may revise this Privacy Policy periodically, to reflect updated business practices or meet new operational, legal and regulatory requirements. Revisions will be published on this website, the "Last updated" date will be modified, and we will issue notifications whenever required by applicable legislation.

Contact Information

If you have any questions about our privacy practices or this Privacy Policy, or wish to exercise your available data rights, please call +64 214 837 295, email support@nuiatabrelife.shop, or send postal correspondence to NUIATA BREWIN, 28 Kauri Street, Highfield, CAN, Timaru 7910, New Zealand.